US companies may need to provide GDPR rights to all, not just EU citizens

With GDPR implementation just over a week away, a report from US law firm Attorney.IO suggests that rights under the legislation may be available to others besides EU citizens. Based on the answers 129 law professors gave to questions on the GDPR, it points out that GDPR doesn’t just apply to citizens of an EU country. It applies to anyone who at any time set foot in an EU country and transmitted their data to a covered internet company. So, for example, a US tourist who visits Germany for one day and returns to the US has rights under the…